Synopsis

Low: libcap security and bug fix update

Type/Severity

Security Advisory: Low

Topic

Updated libcap packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

The libcap packages provide a library and tools for getting and setting
POSIX capabilities.

It was found that capsh did not change into the new root when using the
"--chroot" option. An application started via the "capsh --chroot" command
could use this flaw to escape the chroot restrictions. (CVE-2011-4099)

This update also fixes the following bug:

• Previously, the libcap packages did not contain the capsh(1) manual page.
  With this update, the capsh(1) manual page is included. (BZ#730957)
  

All libcap users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 722694 - CVE-2011-4099 capsh: does not chdir after chroot
• BZ - 730957 - Add missing capsh man page in libcap

CVEs

• CVE-2011-4099

References

• https://access.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux Server 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e
i386
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e
i386
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91

Red Hat Enterprise Linux Workstation 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e
i386
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91

Red Hat Enterprise Linux Desktop 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e
i386
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
s390x
libcap-2.16-5.5.el6.s390.rpm	SHA-256: 82917afb4afed8e42560f9b7e67d99718c910115381a225cb85088369532de50
libcap-2.16-5.5.el6.s390x.rpm	SHA-256: c8ea01b142c91ea5e41f38f0e6e4a74b1606e9ed3505e3d2561adf0cbf959ba2
libcap-debuginfo-2.16-5.5.el6.s390.rpm	SHA-256: 983e6fbb598e0aed9c0a733a85dded1a7b6147c5a012b9341998ff516a9122c4
libcap-debuginfo-2.16-5.5.el6.s390x.rpm	SHA-256: 97392cdc7c383d7e9c4e0ab04f27fda7d7f9f9dec36346c876e602e45b0dee4b
libcap-devel-2.16-5.5.el6.s390.rpm	SHA-256: 0556c63a7f98a6f9a2d7b9e88b811e31401ce1f17fa5e38f890d1044346b2412
libcap-devel-2.16-5.5.el6.s390x.rpm	SHA-256: f7f7dd289f13b5393590614ee32abb78340b04b7bbf55b99df4df7ab1285b12a

Red Hat Enterprise Linux for Power, big endian 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
ppc64
libcap-2.16-5.5.el6.ppc.rpm	SHA-256: 526e15805cd966e15309d4471caee465a16b9a64a12dc4f9e878afc7c1ab23ef
libcap-2.16-5.5.el6.ppc64.rpm	SHA-256: 64a4f7ea899fa876d93f3b2f48bfddd71d601cf6f2c0ec02a04a42609ad8f87a
libcap-debuginfo-2.16-5.5.el6.ppc.rpm	SHA-256: 7184958a1a7f0980e1d336221410c9518f47ffae03c06efebcf7449d59f9a90e
libcap-debuginfo-2.16-5.5.el6.ppc64.rpm	SHA-256: 740f22a3a32c85c6d6e20017aa2a33b59c7e302f1203fb49c43d51f6d7061607
libcap-devel-2.16-5.5.el6.ppc.rpm	SHA-256: 098a7da9f952815d4a304b8c41e4e409e7d9b8fbd3651f055f26b27868aaedce
libcap-devel-2.16-5.5.el6.ppc64.rpm	SHA-256: 510d4c75cfc11a7d43a4564813e1cd2e5bb53f65bf4d651f9ed7b1127826e17b

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e

Red Hat Enterprise Linux Server from RHUI 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
x86_64
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-2.16-5.5.el6.x86_64.rpm	SHA-256: dae8927e25f39c935ed7efe1bb17e051e9fbf118f49e43edfb98ebdfc39d564d
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-debuginfo-2.16-5.5.el6.x86_64.rpm	SHA-256: 9cc3d53a9f25aa3219cac5307c626638663b301ea89f5a544891b2bdba28028e
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91
libcap-devel-2.16-5.5.el6.x86_64.rpm	SHA-256: 2175041a21fa34dc68fdff991ec3444d878c90bc9e1bb746f5e9d22fc423808e
i386
libcap-2.16-5.5.el6.i686.rpm	SHA-256: 2d121127b5f3c769a2899e5ef97ec67d4fe974d6b30047664d87867ca5f5c021
libcap-debuginfo-2.16-5.5.el6.i686.rpm	SHA-256: fae9ca9fc8feba529bf14c47da8f24ed5e631a33c067387abf2be5a5becd3dcb
libcap-devel-2.16-5.5.el6.i686.rpm	SHA-256: 629a1994bd21f168d9aca5e328a5303d4c8308d68186071ae2a836a12ef9dc91

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
libcap-2.16-5.5.el6.src.rpm	SHA-256: 2c2aef9f201cd53695ab0f505841152ba0b9a13ae4f598cd83c98ef83f0e4829
s390x
libcap-2.16-5.5.el6.s390.rpm	SHA-256: 82917afb4afed8e42560f9b7e67d99718c910115381a225cb85088369532de50
libcap-2.16-5.5.el6.s390x.rpm	SHA-256: c8ea01b142c91ea5e41f38f0e6e4a74b1606e9ed3505e3d2561adf0cbf959ba2
libcap-debuginfo-2.16-5.5.el6.s390.rpm	SHA-256: 983e6fbb598e0aed9c0a733a85dded1a7b6147c5a012b9341998ff516a9122c4
libcap-debuginfo-2.16-5.5.el6.s390x.rpm	SHA-256: 97392cdc7c383d7e9c4e0ab04f27fda7d7f9f9dec36346c876e602e45b0dee4b
libcap-devel-2.16-5.5.el6.s390.rpm	SHA-256: 0556c63a7f98a6f9a2d7b9e88b811e31401ce1f17fa5e38f890d1044346b2412
libcap-devel-2.16-5.5.el6.s390x.rpm	SHA-256: f7f7dd289f13b5393590614ee32abb78340b04b7bbf55b99df4df7ab1285b12a